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Abstract 



> 

vn 

»' , The oracle identification problem (OIP) is, given a set 5* of M Boolean oracles out of 2^ 

' determine which oracle in S is the current black-box oracle. We can exploit the information that candidates 

, of the current oracle is restricted to S. The OIP contains several concrete problems such as the original 

' Grover search and the Bernstein- Vazirani problem. Our interest is in the quantum query complexity, for 

(-H ■ which we present several upper and lower bounds. They are quite general and mostly optimal: (i) The query 

complexity of OIP is 0{yJN log M log iV log log M) for any S such that M = \S\ > N, which is better than 

the obvious bound if M < 2^/'°^'*^. (ii) It is 0{VN) for any S if \S\ = TV, which includes the upper 

^ , bound for the Grover search as a special case, (iii) For a wide range of oracles {\S\ — N) such as random 

/ 

r- { ' oracles and balanced oracles, the query complexity is Q{y' N/K), where if is a simple parameter determined 

O^i by S. 

^ 1 Introduction 

An oracle is given as a Boolean function of n variables, denoted by /(xq, . . . ,a;„_i), and so there are 2^ (or 
2^ for N = 2") different oracles. An oracle computation is, given a specific oracle / which we do not know, 
to determine, through queries to the oracle, whether or not / satisfies a certain property. Note that / has 
N black-box 0/1-values, /(O, . . . , 0) through /(I, . . . , 1). (/(O, . . . , 0) is also denoted as /(O), /(I, . . . , 1) as 
f(N — 1), and similarly for an intermediate f{j)-) So, in other words, we are asked whether or not these TV bits 
satisfy the property. There are many interesting such properties: For example, it is called OR if the question 
is whether all the N bits are and Parity if the question is whether the N bits include an even number of 
I's. The most general question (or job in this case) is to obtain all the N bits. Our complexity measure is 
the so-called query complexity, i.e., the number of oracle calls, to get a right answer with bounded error. Note 
that the trivial upper bound is N since we can tell all the A'^ bits by asking /(O) through f{N — 1). If we 
use a classical computer, this N is also a lower bound in most cases. If we use a quantum computer, however, 
several interesting speedups are obtained. For example, the previous three problems have a (quantum) query 
complexity of 0{VN), f and f -|- %/]V, respectively |221 [El EDI HH] • 
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In this paper, we discuss the foUowing problem which we call the oracle identification problem: We are given 
a set S of M different oracles out of the 2^ ones for which we have the complete information (i.e., for each 
of the 2^ oracles, we know whether it is in S or not). Now we are asked to determine which oracle in S is 
currently in the black-box. A typical example is the Grover search where S — {/o, . . . , /at-i} and fi{j) = 1 
iff i = J. (Namely, exactly one bit among the N bits is 1 in each oracle in S. Finding its position is equivalent 
to identifying the oracle itself.) It is well-known that its query complexity is Q{^/N). Another example is the 
so-called Bernstein- Vazirani problem |14j where S — {/o, . . . , /jv-i} and fi{j) = 1 iff the inner product of i and 
J (mod 2) is 1. A little surprisingly, its query complexity is just one. 

Thus the oracle identification problem is a promise version of the oracle computation problem. For both 
oracle computation and oracle identification problems, ^ developed a very general method for proving their 
lower bounds of the query complexity. Also, many nontrivial upper bounds are known as mentioned above. 
However all those upper bounds are for specific problems such as the Grover search; no general upper bounds 
for a wide class of problems have been known so far. 

Our Contribution. In this paper, we give general upper and lower bounds for the oracle identification 
problem. More concretely we prove: (i) The query complexity of the oracle identification for any oracle set S 
is 0{^/N log M log TV log log M) if \S\ ^ M > N. (u) It is 0{^/N) for any S if \S\ = N. (in) For a wide range 

of oracles (M = N) such as random oracles and balanced oracles, the query complexity is ©(-y/^), where K is 
a parameter determined by S. The bound in (i) is better than the obvious bound if M < 2^/'°s^^. Both 
algorithms for (i) and (ii) are quite tricky, and the result (ii) includes the upper bound for the Grover search as 
a special case. Result (i) is almost optimal, and results (ii) and (iii) are optimal; to prove their optimality we 
introduce a general lower bound theorem whose statement is simpler than that of 0]. 

Related Results. Query complexity has constantly been one of the central topics in quantum computation; 
to cover everything is obviously impossible. For the upper bounds of the query complexity, the most significant 
result is due to |22| . known as the Grover search, which also derived many applications and extensions jlOl 
1121 1161 1231 124j . In particular, some results showed efficient quantum algorithms by combining the Grover 
search with other (quantum and classical) techniques. For example, quantum counting algorithm .15] gives 
an approximate counting method by combining the Grover search with the quantum Fourier transformation, 
and quantum algorithms for the claw-finding and the element distinctness problems ^3] also exploit classical 
random sampling and sorting. Most recently, ^ developed an optimal quantum algorithm with 0{N^^^) queries 
for element distinctness problem, which makes use of quantum walk and matches to the lower bounds shown 
by [35]. [2ZI used the element distinctness algorithm to design a quantum algorithm for finding triangles in 
a graph. [3] also showed an efficient quantum search algorithm for spacial regions based on recursive Grover 
search, which is applicable to some geometrically structured problems such as search on a 2-D grid. 

On the lower-bound side, there are two popular techniques to derive quantum lower bounds, i.e., the polyno- 
mial method and the quantum adversary method. The polynomials method was firstly introduced for quantum 
computation by [HI who borrowed the idea from the classical counterpart. For example, it was shown that for 
bounded error cases, evaluations of AND and OR functions need 0(\/iV) number of queries, while parity and 
majority functions at least N/2 and ©(A^), respectively. Recently, used the polynomials method to show 

the lower bounds for the collisions and element distinctness problems. 

The classical adversary method was used in |llll3Uj . which is also called the hybrid argument. Their method 
can be used, for example, to show the lower bound of the Grover search. As mentioned above, 2i introduced a 
quite general method, which is known as the quantum adversary argument, for obtaining lower bounds of various 
problems, e.g., the Grover search, AND of ORs and inverting a permutation. (Tj recently established a lower 
bound of f2(-\/A^) on the bounded-error quantum query complexity of read-once Boolean functions by extending 
0]. ID generalized the quantum adversary method respectively from the aspect of semidefinite programming, 
and |26j generalized the method from Kolmogorov complexity perspective. Furthermore, |17ll^ showed the lower 
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bounds for graph connectivity and local search problem respectively using the quantum adversary method. [S] 
also gave a comparison between the quantum adversary method and the polynomial method. 



2 Formalization 

Our model is basically the same as standard ones (see e.g., 0). For a Boolean function /{xq, . . . ,Xn-i) of n 
variables, an oracle maps \xo, ■ ■ ■ ,Xn-i)\b) to (— j^jQ^ , , , A quantum computation is a 

sequence of unitary transformations Uo^O^Ui^O^---^0^ Ut, where O is a single oracle call 
against our black-box oracle (sometimes called an input oracle), and Uj may be any unitary transformation 
without oracle calls. The above computation sequence involves t oracle calls, which is our measure of the 
complexity {the query complexity). Let iV = 2" and hence there are 2^ different oracles. 

Our problem is called the Oracle Identification Problem (OIP). An OIP is given as an infinite sequence 
S'l, 5*2, Si, . . . , Sn, ■ ■ ■■ Each {N = 2", n = 0, 1, . . .) is a set of oracles (Boolean functions with n variables) 
whose size, \Sn\, is denoted by M (< 2^). A (quantum) algorithm A which solves the OIP is a quantum 
computation as given above. A has to determine which oracle (s Sn) is the current input oracle with bounded 
error. If A needs at most g{N) oracle calls, we say that the query complexity of A is g{N). It should be noted 
that A knows the set Sn completely; what is unknown for A is the current input oracle. 

For example, the Grover search is an OIP whose Sn contains N (i.e., M = N) Boolean functions fi, . . . , Jn 
such that 

/,(j) = l iff i^J. 

Note that f{j) means /(ao7 Q-i? ■ • • 7 ^n-i) {o^i = or 1) such that qq; ■ • ■ 1 <^n-i is the binary representation of the 
number j. Note that Sn is given as a x M Boolean matrix. More formahy, the entry at row z (0 < z < A/ — 1) 
and column j (0 < j < A'' — 1) shows fi{j). Fig. 1 shows such a matrix of the Grover search for N = M = 1^. 
Each row corresponds to each oracle in and each column to its Boolean value. Fig. 2 shows another famous 
example given by an x matrix, which is called the Bernstein- Vazirani problem It is well known that 
there is an algorithm whose query complexity is just one for this problem |14| . 



; 0000000011111111 
0000111100001111 
/ 0011001100110011 
1 10 1 10 1 10 1 1 
00000000000000000000 
00010101010101010101 
00100011001100110011 

0011 0110011001100110 
01000000111100001111 
01010101101001011010 
01100011110000111100 

111 0110100101101001 
10000000000011111111 
10010101010110101010 
10100011001111001100 

1 1 1 0110011010011001 
11000000111111110000 
11010101101010100101 
11100011110011000011 

1111 I01 1 oil ill 001I01 1 




Figure 1: fi{i) = 1 iff i = j Figure 2: f,{j) = i ■ j = Y.x^^ ' "rod 2 

As described in the previous section, there are several similar (but different subtly) settings. For example, 
the problem in 1281 H] is given as a matrix which includes all the rows (oracles) each of which contains N/2 
I's or (1/2 + e)N I's for £ > 0. We do not have to identify the current input oracle itself but have only to 
answer whether the current oracle has N/2 I's or not. (The famous Deutsch-Jozsa problem 19 is its special 
case.) The Z-target Grover search is given as a matrix consisting of all (or a part of) the rows containing I I's. 
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Again we do not have to identify the current input oracle but have to answer with a cohinin which has value 1 
in the current input. Fig. 3 shows an example, where each row contains N /2 + 1 ones. One can see that the 
multi-target Grover search is easy (0(1) queries are enough since we have roughly one half I's), but identifying 
the input oracle itself is much harder. 




Figure 3: Harder case 



0] gave a very general lower bounds for oracle computation. When applying to the OIP (the original 
statement is more general), it claims the following: 

Proposition 1 Let Sn be a given set of oracles, and X,Y he two disjoint subsets of Sn- Let R d X x Y be 
such that 

L For every fa € X , there exist at least m different fi,CzY such that {fa, ft) G ^• 
2. For every fi, € Y , there exist at least m' different fa^X such that {fa, ft) G R- 

Let If^^i be the number of fb ^ Y such that {fa,fb) G R and fa{i) fb{i) I'nd If^^i be the number of fa & X 
such that {fa,fb) S R and fa{i) ^ fb{i)- Let Imax be the maximum oflf^^ilf^^i over all {fa, fb) G R and 



i G {0, . . . , — 1} such that fa{i) 7^ fb{i)- Then, the query complexity for Sn is 




In this paper, we always assume that M > N. If M < N/2, then we can select M columns out of the N 
ones while keeping the uniqueness property of each oracle. Then by changing the state space from n bits to at 
most n — 1 bits, we have a new M x M matrix, i.e., a smaller OIP problem. 

3 General Upper Bounds 

As mentioned in the previous section, we have a general lower bound for the OIP. But we do not know any 
nontrivial general upper bounds. In this section, we give two general upper bounds for the case that M > N 
and for the case that M — N . The former is almost tight as described after the theorem, and the latter includes 
the upper bound for the Grover search as a special case. An N x M OIP denotes an OIP whose Sn (or simply 
S by omitting the subscript) is given as an A^ x M matrix as described in the previous section. Before proving 
the theorems, we introduce a convenient technique called a Column Flip. 

Column Flip. Suppose that S is any A^ x M matrix (a set of M oracles). Then any quantum computation 
for S can be transformed into a quantum computation for an A x M matrix S such that the number of I's is 
less than or equal to the number of O's in every column. (We say that such a matrix is 1-sensitive.) The reason 
is straightforward. If some column in S holds more I's than O's, then we "flip" all the values. Of course we 
have to change the current oracle into the new ones but this can be easily done by adding an extra circuit to 
the output of the oracle. 

Theorem 1 The query complexity of any N x M OIP is 0{^/N log M log A^ log log M) if M > N. 
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Proof. To see the idea, we first prove an easier bound, i.e., 0(v^logA/loglogAf). (Since M can be an 
exponential function in N, this bound is significantly worse than that of the theorem.) If necessary, we convert 
the given matrix S to be 1-sensitive by Column Flip. Then, just apply the Grover search against the input 
oracle. If we get a column j (the input oracle has 1 there), then we can eliminate all the rows having in that 
column. The number of such removed rows is at least one half by the 1-sensitivity. Just repeat this (including 
the conversion to 1-sensitive matrices) until the number of rows becomes 1, which needs O(logM) rounds. Each 
Grover Search needs 0{^/N) oracle calls. Since we perform many Grover searches, the log log M term is added 
to take care of the success probability. 

In this algorithm we counted ©(-s/iV) oracle calls for the Grover search, which is the target of our improve- 
ment. More precisely, our algorithm is the following quantum procedure. Let S — {/o, ...,/m-i} be the given 
N X M matrix: 

Step 1. Let Z C 5 be a set of candidate oracles (or equivalently an N y. M matrix each row of which 
corresponds to each oracle). Set Z = S initially. 
Step 2. Repeat Steps 3-6 until \Z\ = 1. 
Step 3. Convert Z into 1-sensitive matrix. 

Step 4- Compute the largest integer K such that at least one half rows of Z contain K I's or more. (This 
can be done simply by sorting the rows of Z with the number of I's.) 

Step 5. For the current (modified) oracle, perform the multi-target Grover search |^| where we set N/K 
to the maximum number of oracle calls. Iterate this Grover search log log M times (to increase the success 
probability) . 

Step 6. If we succeeded in finding 1 by the Grover search in the previous step, i.e., a column j such that the 
current oracle actually has 1 in that column, then eliminate all the rows of Z having in their column j. (Let 
Z be this reduced matrix.) Otherwise eliminate all the rows of Z having at least K I's. 

Now we estimate the number of oracle calls in this algorithm. Let Af,. and Kr be the number of the rows 
of Z and the value of K in the r-th repetition respectively. Initially, Mi — M. Note that the number of the 
rows of Z becomes \Z\/2 or less after Step 6, i.e., Mr+i < Mr/2 even if the Grover search is successful or not 
in Step 5 since the number of I's in each column of the modified matrix is less than \Z\/2 and the number of 
the rows which have at least K I's is \Z\/2 or more. Assuming that we need the T repetitions to identify the 
current input oracle, the total number of the oracle calls is 




We estimate the lower bounds of Kr- Note that there are no identical rows in Z and the number of possible rows 
that contain at most Kr I's is X]i=o ^ ^ ^ repetition. Thus, it must hold that ^ < X^tTo ^ ^ ^ ' 

Since J2f=o ^ ^ ^ < ^N^-, Kr = Q if Mr > N, otherwise Kr > 1. Therefore the number of the 

oracle calls is at most 

1 Vn log log V W + ^ ViV log log M log TV, 

2 ^ y logAfj 2 

where the number of rows of Z becomes A'' or less after the T'-th repetition. For {Mi, Af^/}, there exists a 
sequence of integers {fci, fc^'} (1 < ki < ■ ■ ■ < kx' < log Af) such that 



Af Af M M 

< AfT' < —, < • • • < ^ < Af2 < ^ 

2Ky/ — 2''t'-i ~ ~ 2 2 ~ 2 1 
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since M^jl > Ai^+i for r — 1, ...,T'. Thus, we have 



T' T' logJ\/-l 



Then, the total number of the oracle calls is O [y/N log A/ log N log log M) . 

Next, we consider the success probability of our algorithm. By the analysis of the Grover search in ^21j if 
the number of I's of the current modified oracle is larger than Kr in the r-th repetition, then we can find 1 in 
the current modified oracle with probability at least 1 — (3/4)i°g'°g^^. This success probability worsens after T 
rounds of repetition but stiU keeps a constant as follows: {1 - {3/Ay°ii^°s'^')'^ > {1 ~ 1/ \ogMy°s^' ^ □ 



I , and therefore, we have logAf < K\ogN. Let also a relation R be the set of all (/, /') 



Theorem 2 There is an OIP whose query complexity is fl ( y i^gj^ log M) . 

Proof. This can be shown in the same way as Theorem 5.1 in 1' as follows. Let X be the set of all the oracles 
whose values are 1 at exactly K positions and Y be the set of all the oracles that have I's at exactly K + 1 
positions. We consider the union of X and Y for our oracle identification problem. Thus, M — \X\ + \Y\ = 

y K J K+1 ^ 

such that f £ X, f £ Y and they differ in exactly a single position. Then the parameters in Theorem 5.1 in 

f N - K \ f K + 1 \ 

^ take values m=:| ^ \^N~K,m'— \ ^ j = K + 1 and I ~ I' ~ 1. Thus the lower bound 

is fl{\/{N - K){K + 1)). Since logM 0{K log N), K can be as large as ^C^^), which implies our lower 
bound. D 

Thus the bound in Theorem 1 is almost tight but not exactly. When M = N, however, we have another 
algorithm which is tight within a factor of constant. Although we prove the theorem for M = N, it also holds 
for M = poly{N). 



Theorem 3 The query complexity of any N x N OIP is 0{v N). 

Proof. Let S be the given N x N matrix. Our algorithm is the following procedure: 

Step 1. Let Z = S. If there is a column in Z which has at least \/N O's and at least ^/N I's, then perform 
a classical oracle call with this column. Eliminate all the inconsistent rows and update Z. 

Step 2. Modify Z to be 1-sensitive. Perform the multi-target Grover search ^21 to obtain column j. 

Step 3. Find a column k which has and 1 in some row while the column j obtained in the Step 2 has 1 in 
that row (there must be such a column because any two rows are different) . Perform a classical oracle call with 
column k and remove inconsistent rows. Update Z. Repeat this step until \Z\ = 1. 

Since the correctness of the algorithm is obvious, we only prove the complexity. A single iteration of Step 1 
removes at least ^/N rows, and hence we can perform at most iterations (at most ^/N oracle calls). Note 
that after this step each column of Z has at most a/ZV O's or at most y/N Vs. Since we perform the Column 
Flip in Step 2, we can assume that each column has at most I's. The Grover search in Step 2 needs 0{^/N) 
oracle calls. Since column j has at most ^/N I's, the classical elimination in Step 3 needs at most ^/N oracle 
calls. □ 



4 Tight Upper Bounds for Small M 

In this section, we investigate the case that M — N in more detail. Note that Theorem 3 is tight for the whole 
N X N OIP but not for its subfamilies. (For example, the Bernstein- Vazirani needs only 0(1) queries.) To seek 
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optimal bounds for subfamilies, we introduce the following parameter: Let S be an OIP given as an iV x M 
matrix. Then #(S') be the maximum number of I's in a single column of the matrix. We first give a lower 
bound theorem in terms of this parameter, which is a simplified version of Proposition 1. 

Theorem 4 Let S be an N x M matrix and K = #(5'). Then S needs M / K) queries. 

Proof. Without loss of generality, we can assume that S is 1-sensitive, i.e., K < AI/2. We select X {Y, resp.) 
as the upper (lower, resp.) half of S (i.e., \X\ = \Y\ = M/2) and set i? = X x F (i.e., {x,y) E R for every 
X £ X and y E Y). Let Sj be the number of I's in the j-th column of Y. Now it is not hard to see that 
we can set m = m' = Ix.jlyj = max{(5j(^ — Kj + Sj), (-^ — Sj){Kj — (5j)} where Kj is the number of 
I's in column j. Since Kj < K, this value is bounded from above by ^K. Hence, Proposition ^ implies 

Although this lower bound looks much simpler than Proposition 1, it is equally powerful for many cases. 
For example, we can obtain Q{y/N) lower bound for the OIP given in Fig. 3 which we denote by X. Note in 
general that if we need t queries for a matrix S, then we also need at least t queries for any S ^ S. Therefore 
it is enough to obtain a lower bound for the matrix X which consists of the N/2 upper-half rows of X and all 
the I's of the right half can be changed to O's by the Column Flip. Since #(^ ) = 1, Theorem 4 gives us an 
lower bound of fl{^/N). 

Now we give tight upper bounds for three subfamilies oi N x N matrices. The first one is not a worst-case 
bound but an average-case bound: Let AV{K) he an N x N matrix where each entry is 1 with the probability 
K/N. 

Theorem 5 The query complexity for AV{K) is 0(-\/ N / K) with high probability if K = N" for < a < 1. 

Proof. Suppose that X is an AV{K). By using a standard Chernoff-bound argument, we can show that the 
following three statements hold for X with high probability (Proofs are omitted), (i) Let Ci be the number of 
I's in column i. Then for any i, 1/2K < Ci < 2K. (ii) Let rj be the number of I's in row j. Then for any j, 
1/2K < rj < 2K. (iii) Suppose that is a set of any d columns in X {d is a, function in a which is constant 
since a is a constant). Then the number of rows which have I's in all the columns in D is at most 2\ogN. 

Our lower bound is immediate from (i) by Theorem 01 For the upper bound, our algorithm is quite simple. 
Just perform the Grover search independently d times. Each single round needs 0{^J N / K) oracle calls by 
(ii). After that the number of candidates is decreased to 2 log A'' by (iii). Then we simply perform the classical 
elimination, just as step 3 of the algorithm in the proof of Theorem 3, which needs at most 2 log A^ oracle calls. 
Since d is a constant, the overaU complexity is 0{yjN/K) + log A^ = \/N/K if AT = iV". □ 

The second subfamily is called a balanced matrix. Let B{K) be a family of N x N matrices in which every 
row and every column has exactly K I's. (Again the theorem holds if the number of I's is 8 (AT).) 

Theorem 6 The query complexity for B{K) is e{y/N/K) if K < N^/^. 

Proof. The lower-bound part is obvious by Theorem 4. The upper-bound part is to use a single Grover search 
+ K classical efimination. Thus the complexity is 0{^jN/K + AT), which is 0{^jN/K) if AT < N^/'^. □ 

The third one is somewhat artificial. Let H{k), called an hybrid mairia; because it is a combination of Grover 
and Bernstein- Vazirani, be a matrix defined as follows: Let a = (ai, a2, . . . , a„_fc, On-k+i, • • ■ , in) and 
X = {xi,X2, . ■ . ,Xn-k,Xn-k+i, ■ ■ • ,a;„)- Then/a(a;) = 1 iff (i) (ai, ...,a„_fe) = (xi, x„_fc) and (ii) (a„_fe+i, ...,a„)- 
{xn-k+l^ Xn) = (mod 2). Fig. 4 shows the case that k — 2 and n — 4. 
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Figure 4: H{k) with n ~ 4 and k = 2 



Theorem 7 The query complexity for H{k) is Q{^N / K), where K — 2^ . 

Proof. We combine the Grover search [221 with BV algorithm 14 to identify the oracle fa by determining 
the hidden value a of fa- We first can determine the first n — k bits of a. Fixing the last k bits to |0), we 
apply the Grover search using oracle fa for the first n — k bits to determine oi, ...,a„_fc. ft should be noted 
that /a(ai, ■ • ■ ,a„_fc,0, ... ,0) = f and /q(xi, . . . ,Xn-k,0, ... ,0) = for any xi, ...,Xk ^ ai, ...,ak- Next, we 
apply BV algorithm to determine the remaining k bits of a. This algorithm requires 0{^/N/K) queries for the 
Grover search and 0(1) queries for BV algorithm to determine a. Therefore we can identify the oracle fa using 
0{^/N/K) queries. □ 



5 Classical Lower and Upper Bounds 

The lower bound for the general N x M OIP is obviously if M > N . When M = N, we can obtain bounds 
being smaller than N for some cases. 

Theorem 8 The deterministic query complexity forNxN OIP S with 4{S) = K is at least J + [log K\-2. 

Proof. Let fa be the current input oracle. The following proof is due to the standard adversary argument. Let 
A be any deterministic algorithm using the oracle fa. Suppose that we determine a e {0, 1}" to identify the 
oracle fa. Then the execution of A is described as follows: (i) In the first round, A calls the oracle with the 
predetermined value xq and the oracle answers with do ~ fa{xo). (ii) In the second round, A calls the oracle 
with value xi, which is determined by do and the oracle answers with di = fa{xi). (iii) In the (i + l)-st round, 
A calls the oracle with Xi which is determined by do,di, ...,di-i and the oracle answers with di = fa{xi). (iv) 
In the TO-th round A outputs a which is determined by do,di, ...,dm-i and stops. Thus, the execution of A 
is completely determined by the sequence {do^di, ...,dm~i) which is denoted by A{a). (Obviously, if we fix a 
specific a, then A(a) is uniquely determined). 

Let mo = IN/K\ + [log if J — 3 and suppose that A halts in the mo-th round. We compute the sequence 
(co, ci:...jCmo), Cj G {0,1}, and another sequence {Lq, Li, . . . , L^^^), Li C {a|a G {0,1}"}, as follows (note 
that Co , . . . , c,„,-| are similar to do, drji-i above and are chosen by the adversary): (i) Lo = {0,1}". (ii) 
Suppose that we have already computed Lqi Li, and cq, Ci_i. Let Xi be the value with which A calls the 
oracle in the (i + l)-st round. (Recall that Xi is determined by co, Ci_i.) Let L° = {s\fs{xi) = 0} and 
ii {s I fs{xi) = 1}. Then if \Li n L°\ > \Li n L^\ then we set q = and L^+i = Li n L°. Otherwise, i.e., if 
|Lj n L"| < |ii n L^\, then we set q = 1 and L^+i = n L^. 



Now wc can make the following two claims. 

Claim 1. \Lmg\ > 2. (Reason: Note that |Lo| = and the size of Li decreases as i increases. By the 
construction of Li, one can see that until \Li\ becomes 2K, its size decreases additively by at most X in a single 
round and after that it decreases multiplically at most one half. The claim then follows by a simple calculation.) 
Claim 2. If a € Lmg, then (cq, . . . , Cmo) = A{a). (Reason: Obvious since a G Lq H Li n • • • n L,ng ) 
Now it follows that there are two different ai and a2 in Lmc such that A{ai) — A(a2) by Claims 1 and 2. 
Therefore A outputs the same answer for two different oi and 02, a contradiction. □ 

For the classical upper bounds, we only give the bound for the hybrid matrix. Similarly for AV{K) and 
B{K). 

Theorem 9 The deterministic query complexity for H{k) is 0(^ + log if). 

Proof. Let fa be the current input oracle. The algorithm consists of an exhaustive and a binary search to 
identify the oracle fa by determining the hidden value a of /q. First, we determine the first n — k bits of a 
by fixing the last k bits to all O's and using exhaustive search. Second, we determine the last k bits of a by 
using binary search. This algorithm needs 2"~'^(= ^) queries in the exhaustive search, and 0{k){= 0{\ogK)) 
queries in the binary search. Therefore, the total complexity of this algorithm is 0(2""*^ + k) — + log if). 

□ 

6 Concluding Remarks 

Some future directions are as follows: The most interesting one is a possible improvement of Theorem 1, for 
which our target is 0{y/N log M). Also, we wish to have a matching lower bound, which is probably possible by 
making the argument of Theorem 2 a bit more exact. As mentioned before, in a certain situation, we do not have 
to determine the current oracle completely but have only to do that "approximately", e.g., have to determine 
whether it belongs to some subset of oracles. It might be interesting to investigate how this approximation 
makes the problem easier (or basically not). 

Most recently, it turned out that our problem OIP is equivalent to exact learning, which is a well-studied 
model of computional learning, by comments from Servedio. j25| has already shown interesting results on the 
quantum exact learning, which are independent of our main result on the quantum upper bound of any OIP. 
More precisely, |25| defined a natural quantum version of two learning models and proved the equivalence up to 
polynomial factors between classical and quantum query complexity for the models. Interpreting the result on 
the exact learning into the context of our OIP, if there exists a quantum algorithm that solves an OIP S with 
Q queries then there exists a deterministic algorithm that solves S with 0{Q^ log N) queries. 
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